Iran's 'Fox Kitten' Group Aids Ransomware Attacks on US Targets

CISA and the FBI warn that Iran-linked Fox Kitten is actively monetizing access to victim networks—targeting VPNs and edge devices (including several recent zero-days) to sell/domain-admin access and collaborate with ransomware operators (e.g., ALPHV/BlackCat), using credential theft, web shells, lateral movement, and privilege escalation across multiple sectors.